AZL-111751

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111751.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-111751
Upstream
  • CVE-2026-105042
Published
2026-10-29T11:17:24Z
Modified
2026-11-01T05:30:16Z
Summary
CVE-2026-105042 affecting package qpid-proton 0.40.0-15
Details

A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash.

This issue affects Apache Qpid Proton C: through 0.40.0.

Users are recommended to upgrade to version 0.41.1, which fixes the issue.

References

Affected packages

Azure Linux:3 / qpid-proton

Package

Name
qpid-proton
Purl
pkg:rpm/azure-linux/qpid-proton

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
0.40.0-15

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111751.json"